full-disclosure - [FD] Multiple Arris Touchstone Gateway Vulnerabilities

Open Source and information security mailing list archives

Message-ID: <CAFCOD8U5Pcrmg0QCX=s7iH8mGR2DMQ+gk9qE9DV1SyEP=5qS6g@mail.gmail.com>
Date: Mon, 14 May 2018 09:21:18 -0400
From: Akshay Sharma <hi@...haysharma.net>
To: fulldisclosure@...lists.org
Subject: [FD] Multiple Arris Touchstone Gateway Vulnerabilities

Hi,

Multiple vulnerabilities exist in Arris Touchstone Telephony Gateway (TG)
Series devices, related to its web administration console.
The CVEs for these devices have been
created: CVE-2018-10989, CVE-2018-10990, CVE-2018-10991.

A blog post containing the full disclosure has been created:
https://medium.com/@AkshaySharmaUS/comcast-arris-touchstone-gateway-devices-are-vulnerable-heres-the-disclosure-7d603aa9342c

Thank you.

Regards
Akshay 'Ax' Sharma

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives